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DETAILED ACTION 



1. 



This action is in reply to applicant's correspondence of 03 February 2005. 



2. 



Claims 1-27 are pending for examination. 



3. 



Claims 1-8, 12-17, 21-23, 25-27 are rejected. 



Claim Rejections - 35 USC § 112 



The following is a quotation of the second paragraph of 35 USC. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

Where applicant acts as his or her own lexicographer to specifically define a term of a 
claim contrary to its ordinary meaning, the written description must clearly redefine the claim 
term and set forth the uncommon definition so as to put one reasonably skilled in the art on 
notice that the applicant intended to so redefine that claim term. Process Control Corp. v. 
HydReclaim Corp., 190F.3d 1350, 1357, 52USPQ2d 1029, 1033 (Fed. Cir. 1999). The term 
"random number" in claims 1-3,13,25,26 and associated dependent claims, is used by the claim 
to mean a true "random number 7 ', while the accepted meaning is "pseudo-random number." The 
term is indefinite because the specification does not clearly redefine the term (see Yolkowski, 
James, 'Randomness', Math Lair, 6/16/2001, entire document, http:/Avww.stormloader.com/aiv/random.htmi y 

The term "absolute" in claim 22 is a relative term which renders the claim indefinite. The 
term "absolute" is not defined sufficiently by the claim, the specification does not provide a 
standard for ascertaining the requisite degree, and one of ordinary skill in the art would not be 
reasonably apprised of the scope of the invention. Correction is required. 
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The term "relative" in claim 23 is a relative term which renders the claim indefinite. The 
term "relative" is not defined sufficiently by the claim, the specification does not provide a 
standard for ascertaining the requisite degree, and one of ordinary skill in the art would not be 
reasonably apprised of the scope of the invention. Correction is required. 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 USC. 102 that form the 
basis for the rejections under this section made in this Office action: 

(a) the invention was known or used by others in this country, or patented or described in a printed publication in this 
or a foreign country, before the invention thereof by the applicant for a patent 

4. Claims 1-8, 12-17, 21-23, 25-27 are rejected under 35 U.S.C. 102(a) as being anticipated 
by England et al, U.S. Patent 6,327,652 Bl. 

5. As per claim 1; "A method of performing electronic communications between members 
of a group wherein the communications are authenticated as being from a member of the group 
and have not been altered, the method comprising the steps of: 

generating a plurality of random numbers [figures 1-11 and associated descriptions, 
whereas the signed secure operating system components insofar as signing via a public key 
encryption process thereby generating uniquely signed components (i.e., pseudo-random data 
structures), as broadly interpreted by the examiner, clearly encompasses the 'plurality of random 
numbers' aspects of the claim.]; 

distributing in a digital medium the plurality of random numbers to 
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the members of the group [figures 1-11 and associated descriptions, whereas the 
signed components are distributed to the users/network node processing elements, insofar 
as the customers of the DRM content of which the secure operating system components 
form the environment from which the content is so accessed, as broadly interpreted by 
the examiner, clearly encompasses the ' . . . distributing in a digital medium . . . group 
aspects of the claim.]; 

publishing a hash value of contents of the digital medium [figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components insofar as signing via a 
public key encryption process thereby generating uniquely signed components (i.e., hashed 
components prior to the cryptographic signing process) and subsequent hash/certificate 
verification prior to allowing the secure operating system components to process the DRM 
functions, as broadly interpreted by the examiner, clearly encompasses the 'publishing a hash 
value . . / aspects of the claim.]; 

distributing to the members of the group 

public-key-encrypted messages each containing 
a same token comprising 

a random number [figures 1-11 and associated descriptions, 
whereas the signed secure operating system components insofar as signing 
via a public key encryption process thereby generating uniquely signed 
components (i.e., hashed components prior to the cryptographic signing 
process) and the public key certificate contains a certificate signing 
authority/entity private key signed verification content (common token 
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element that is commonly distributed), as broadly interpreted by the 
examiner, clearly encompasses the '.. .distributing ... group ... public- 
key-encrypted messages . . . token . . . random number' aspects of the 
claim.]; and 

encrypting a message with a key generated from 
the token and 

the plurality of random numbers [figures 1-11 and associated descriptions, 
whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions, as broadly interpreted by 
the examiner, clearly encompasses the 'encrypting a message . . . token . . . random 
numbers' aspects of the claim.].". 

6. Claim 2 additionally recites the limitation that; "The method of claim 1 wherein the 
generating step comprises 

generating at least approximately 20,000 random numbers.". 
The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components insofar as signing via a 
public key encryption process thereby generating uniquely signed components (i.e., pseudo- 
random data structures), of which the client base for which distribution is to occur is clearly 
greater than 20,000 users (i.e., installed secured operating systems per se, each with art least a 
signed secure operating system component), as broadly interpreted by the examiner, clearly 
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approximately 20,000 . . . 5 aspects of the 



7. Claim 3 additionally recites the limitation that; "The method of claim 2 wherein the 
generating step comprises 

generating 256-bit random numbers.". 
The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components insofar as signing via a 
public key encryption process thereby generating uniquely signed components (i.e., pseudo- 
random data structures), of which the client base for which distribution is to occur is clearly 
greater than 20,000 users (i.e., installed secured operating systems per se, each with art least a 
signed secure operating system component, of which said component would generally be greater 
than 256 bits (32 bytes)), as broadly interpreted by the examiner, clearly encompasses the 
'plurality of random numbers . . . approximately 20,000 . . . 256-bit random . . . ' aspects of the 
claim.). 

8. Claim 4 additionally recites the limitation that; "The method of claim 1 wherein the step 
of distributing in a digital medium comprises 

distributing in a removable digital medium ". 
The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the components, of which the client base for which distribution is to occur 
is clearly a function of the digital medium distribution software which, as broadly interpreted by 
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the examiner, clearly encompasses the 'distributing ... digital medium ... removable ... medium' 
aspects of the claim.). 

9. Claim 5 additionally recites the limitation that; "The method of claim 4 wherein the step 
of distributing in a digital medium comprises 

distributing in a medium selected from the group consisting of 
CD-ROMS and 
DVD-ROMS". 

The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the components, of which the client base for which distribution is to occur 
is clearly a function of the digital medium distribution software which is embodied on CD-ROM 
and other associated removable optical memory technologies, as broadly interpreted by the 
examiner, clearly encompasses the 'distributing ... digital medium ... removable ... medium ... 
CD-ROMS. . . ' aspects of the claim.). 

10. Claim 6 additionally recites the limitation that; "The method of claim 1 wherein the steps 
of publishing a hash value comprises 

employing a Secure Hash Algorithm.". 
The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the signed secure operating system components insofar as signing via a 
public key encryption process thereby generating uniquely signed components (i.e., hashed 
components prior to the cryptographic signing process) and subsequent hash/certificate 
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verification prior to component transfer (i.e., utilizing associated data structure storage, via 
X.509, and SSL transfer; both using SHA hashing services/functionality), and subsequent 
allowing the secure operating system components to process the DRM functions, as broadly 
interpreted by the examiner, clearly encompasses the 'publishing a hash value . . . Secure Hash 
Algorithm' aspects of the claim.). 

11. Claim 7 additionally recites the limitation that; "The method of claim 1 additionally 
comprising the step of 

rejecting a digital medium received by a user if 

a hash value of contents of the received digital medium does not equal 

the published hash value of the contents of the distributed digital 
medium.". 

The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions if so verified, else, rejected (i.e., 
not used as an operating system component for the DRM services), as broadly interpreted by the 
examiner, clearly encompasses the 'rejecting . . . medium . . . does not equal . . . published hash 
value . . ' aspects of the claim ). 

12. Claim 8 additionally recites the limitation that; "The method of claim 1 wherein the step 
of distributing a token 

is performed daily ". 
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The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions such that ephemeral keys used 
for the certificate verification functions, as broadly interpreted by the examiner, clearly 
encompasses the 'distributing a token . . . performed daily ... 5 aspects of the claim.). 

13. Claim 12 additionally recites the limitation that; "The method of claim 1 wherein the 
encrypting step comprises 

employing symmetric key encryption.". 
The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions such that private/session keys 
(i.e., symmetric encryption), as broadly interpreted by the examiner, clearly encompasses the *... 
symmetric key encryption 9 aspects of the claim ). 

14. Claim 13 additionally recites the limitation that; "The method of claim 1 wherein the 
encrypting step comprises 

choosing randomly one of the plurality of random numbers ". 
The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the signed secure operating system components insofar as signing via a 
public key encryption process thereby generating uniquely signed components (i.e., pseudo- 
random data structures), so that the DRM functions become a function of the 'pseudo-random 
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data structures', as broadly interpreted by the examiner, clearly encompasses the 'choosing 
randomly ... plurality of random numbers' aspects of the claim.). 

15. Claim 14 additionally recites the limitation that; "The method of claim 13 additionally 
comprising the step of 

sending the encrypted message with 

an index to the randomly chosen number and 

a timestamp sufficient to enable a recipient to determine 
a proper decryption token ". 
The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the signed secure operating system components insofar as signing via a 
public key encryption process thereby generating uniquely signed components (i.e., hashed 
components prior to the cryptographic signing process) and subsequent hash/certificate 
verification prior to component transfer (i.e., utilizing associated data structure storage, via 
X.509, and SSL transfer; both using inherent referencing of signed components for actual secure 
operating system components utilization), and subsequent allowing the secure operating system 
components to process the DRM functions such that ephemeral keys used for the certificate 
verification functions (i.e., inherently timestamp), as broadly interpreted by the examiner, clearly 
encompasses the 'encrypted message ... index ... number ... timestamp ... proper decryption 
token' aspects of the claim.). 



16. 



Claim 15 additionally recites the limitation that; "The method of claim 1 wherein 
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the group is a domain ". 
The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed components are distributed to the users/network node 
processing elements, insofar as the customers of the DRM content of which the secure operating 
system components form the environment from which the content is so accessed, and further, the 
group receiving the DRM content via a network infrastructure (i.e., the Internet; an inherently 
domain oriented network architecture), as broadly interpreted by the examiner, clearly 
encompasses the \ . group is a domain' aspects of the claim ). 

17. Claim 16 additionally recites the limitation that; "The method of claim 1 wherein 
one or more members of the group is a domain.". 

The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed components are distributed to the users/network node 
processing elements, insofar as the customers of the DRM content of which the secure operating 
system components form the environment from which the content is so accessed, and further, the 
group receiving the DRM content via a network infrastructure (i.e., the Internet; an inherently 
domain oriented network architecture, of which sub-elements of the Internet, are themselves 
domains), as broadly interpreted by the examiner, clearly encompasses the ' . . group is a domain' 
aspects of the claim ). 

18. Claim 17 additionally recites the limitation that; "The method of claim 1 wherein 
anonymity of a sender of the message is maintained ". 
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The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions, and further encompassing use of 
the CPU ID public key signing aspects of the signed/verified components (i.e., assured 
anonymous CPU ID with authentication), as broadly interpreted by the examiner, clearly 
encompasses the 'anonymity ... sender ... message is maintained' aspects of the claim). 

19. Claim 21 additionally recites the limitation that; "The method of claim 1 wherein the 
method provides 

absolute anonymity for communications between the members.". 
The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions, and further encompassing use of 
the CPU ID public key signing aspects of the signed/verified components (i.e., assured 
anonymous CPU ID with authentication), as broadly interpreted by the examiner, clearly 
encompasses the 'absolute anonymity ... between the members' aspects of the claim). 

20. Claim 22 additionally recites the limitation that; "The method of claim 21 wherein the 
method provides 

absolute anonymity 

as to authorship of the communications and 

as to electronic mail routing of the communications". 
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The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions, and further encompassing use of 
the CPU ID public key signing aspects of the signed/verified components (i.e., assured 
anonymous CPU ID with authentication), as broadly interpreted by the examiner, clearly 
encompasses the 'absolute anonymity . . . between the members 5 aspects of the claim.). 

21 . Claim 23 additionally recites the limitation that; "The method of claim 1 wherein the 
method provides 

relative anonymity for communications between the members.". 
The teachings of England et al suggest such limitations (i.e., figures 1-1 1 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions, and further encompassing use of 
the CPU ID public key signing aspects of the signed/verified components (i.e., assured 
anonymous CPU ID with authentication), as broadly interpreted by the examiner, clearly 
encompasses the 'absolute anonymity . . . between the members' aspects of the claim). 

22. As per claim 25; "A method of performing anonymous electronic communications 
between members of a group wherein the communications are authenticated as being from a 
member of the group and have not been altered, the method comprising the steps of: 

generating a plurality of random numbers [figures 1-11 and associated descriptions, 
whereas the signed secure operating system components insofar as signing via a public key 
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encryption process thereby generating uniquely signed components (i.e., pseudo-random data 
structures), and further encompassing use of the CPU ID public key signing aspects of the 
signed/verified components (i.e., assured anonymous CPU ID with authentication), as broadly 
interpreted by the examiner, clearly encompasses the 'plurality of random numbers' aspects of 
the claim.]; 

distributing in a digital medium the plurality of random numbers to 

the members of the group [figures 1-11 and associated descriptions, whereas the 
signed components are distributed to the users/network node processing elements, insofar 
as the customers of the DRM content of which the secure operating system components 
form the environment from which the content is so accessed, as broadly interpreted by 
the examiner, clearly encompasses the c . . .distributing in a digital medium . . . group 
aspects of the claim.]; and 
encrypting a message with a key generated from 
a token and 

the plurality of random numbers while 

maintaining anonymity of authorship of the message [figures 1-11 and 
associated descriptions, whereas the signed secure operating system components 
signed, distributed, encrypted/decrypted, and verified for use in the DRM 
functions, and further encompassing use of the CPU ID public key signing aspects 
of the signed/verified components (i.e., assured anonymous CPU ID with 
authentication), as broadly interpreted by the examiner, clearly encompasses the 
'encrypting a message . . . token . . . random numbers' aspects of the claim.].". 
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23. As per claim 26; "A method of performing anonymous electronic communications 
between members of a group wherein the communications are authenticated as being from a 
member of the group and have not been altered, but wherein said communications are revocable, 
the method comprising the steps of: 

generating a plurality of random numbers [figures 1-11 and associated descriptions, 
whereas the signed secure operating system components insofar as signing via a public key 
encryption process thereby generating uniquely signed components (i.e., pseudo-random data 
structures), further encompassing the use of the CPU ID public key signing aspects of the 
signed/verified components (i.e., assured anonymous CPU ID with authentication), and further 
use of the said public key encryption process whereas the revocation of certificates via ACL 
services, as broadly interpreted by the examiner, clearly encompasses the 'plurality of random 
numbers' aspects of the claim.]; 

distributing in a digital medium the plurality of random numbers to 

the members of the group [figures 1-11 and associated descriptions, whereas the 
signed components are distributed to the users/network node processing elements, insofar 
as the customers of the DRM content of which the secure operating system components 
form the environment from which the content is so accessed, as broadly interpreted by 
the examiner, clearly encompasses the ' . . . distributing in a digital medium . . . group 
aspects of the claim.]; 

encrypting a message with a key generated from 
a token and 
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the plurality of random numbers [figures 1-11 and associated descriptions, 
whereas the signed secure operating system components signed, distributed, 
encrypted/decrypted, and verified for use in the DRM functions, and further 
encompassing use of the CPU ID public key signing aspects of the signed/verified 
components (i.e., assured anonymous CPU ID with authentication), as broadly interpreted 
by the examiner, clearly encompasses the 'encrypting a message . . . token . . . random 
numbers' aspects of the claim.]; and 

permitting revocation of the message by a revocation authority comprising 

one or more of the members [figures 1-11 and associated descriptions, whereas 
the signed secure operating system components signed, distributed, encrypted/decrypted, 
and verified for use in the DRM functions, further encompassing the use of the CPU ID 
public key signing aspects of the signed/verified components (i.e., assured anonymous 
CPU ID with authentication) and further use of the said public key encryption process 
whereas the revocation of certificates via ACL services, as broadly interpreted by the 
examiner, clearly encompasses the 'encrypting a message ... token ... random numbers' 
aspects of the claim.].". 

24. Claim 27 additionally recites the limitation that; "The method of claim 26 wherein the 
permitting step 

maintains anonymity of authorship of the message ". 
The teachings of England et al suggest such limitations (i.e., figures 1-11 and associated 
descriptions, whereas the signed secure operating system components signed, distributed, 
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encrypted/decrypted, and verified for use in the DRM functions, further encompassing the use of 
the CPU ID public key signing aspects of the signed/verified components (i.e., assured 
anonymous CPU ID with authentication) and further use of the said public key encryption 
process whereas the revocation of certificates via ACL services, as broadly interpreted by the 
examiner, clearly encompasses the 'permitting revocation ... maintains anonymity of authorship' 
aspects of the claim ). 

Allowable Subject Matter 
25. Claims 9-11, 18-20, 24 are objected to as being dependent upon a rejected base claim, but 
would be allowable if rewritten in independent form including all of the limitations of the base 
claim and any intervening claims, subject to the rejection consideration in the '112-2 rejection 
above. 
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Conclusion 



26. Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861, and whose 
unofficial Fax number is (571) 273-3861. The examiner can normally be reached Monday 
through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh, can be reached at (571) 272-3795. The Fax number for the organization 
where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, see http://pair-direct.uspto.gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Ronald Baum 



Patent E; 




